In my stack I have an ACM certificate that is utilized by a

Question

In my stack I have an ACM certificate that is utilized by a CloudFront distribution When resources are being replaced the certificate is always attempting to be deleted before the distribution which fails because obviously the distro still depends on the cert Shouldn t the distribution be deleted or updated and then the certificate deleted Happy to file an issue if needed just wondering if anyone else has experienced this

purple-jelly-68780 · Answer

I ve added the dependsOn attribute to the distribution so it depends on both the certificate and its validation but that doesn t seem to change the behavior

purple-jelly-68780 · Answer

Possibly related <https github com pulumi pulumi aws issues 1023>

great-sunset-355 · Answer

I have a module that creates ACM and Cloudfront I did not notice this problem Except it sometimes created 2 certs and then removed one What resources that require replacement are you updating <https github com hashicorp terraform issues 18997>

purple-jelly-68780 · Answer

< great sunset 355> thanks for the response I m basically updating the domain name which requires certs and route 53 records to be replaced and triggers a number of other updates I m working on a small example that can reproduce the problem now so I can share it

purple-jelly-68780 · Answer

Well I made this stack which is almost exactly the same as my stack and the domain update behaved exactly as it was supposed to So I must have something borked in the state of things I m probably just gonna destroy and start over from scratch Thanks for looking at this < great sunset 355> I appreciate it

purple-jelly-68780 · Answer

great-sunset-355 · Answer

Thanks I will take a look as soon as I can because I could be affected by this as well

great-sunset-355 · Answer

I had to vipe the state few times as well It did not give me much confidence Maybe worth exploring the state file before you destroy it